Tag Archives: exploit

Apache exploit may crash your server – heres how to fix it

Posted on August 26, 2011 by Liz Quilty

We have picked up that there was an exploit in Apache which can result in your server running out of memory. the discovery was noticed quiet some time ago, but never fixed, and it seems to have reared its head … Continue reading →

Posted in Security | Tagged , , , , , , , | 1 Comment

Jboss Exploits

Posted on March 17, 2011 by Liz Quilty

There is a JBoss exploit out in the wild.  See http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0738 and https://access.redhat.com/kb/docs/DOC-30741 for details.

Posted in Security | Tagged , , , | 3 Comments

WordPress mass update script 3.04 – Urgent

Posted on December 30, 2010 by Liz Quilty

From the guys at wordpress We've fixed a pretty critical vulnerability in WordPress' core HTML sanitation library, and because this library is used lots of places it's important that everyone update as soon as possible. I realize an update during … Continue reading →

Posted in Security | Tagged , , , , , , , , , | Leave a comment

Proftpd exploitable versions

Posted on December 7, 2010 by Juan Rossi

Due the severity of the proftp bug, and the mixed systems and versions in the VPSs, we many customers have switched to use vsftp, others just started using sftp, regardless that we have the following notes for customers willing to … Continue reading →

Posted in Rimuhosting | Tagged , , , , | Leave a comment

Disabling exploitable proftpds

Posted on November 13, 2010 by Peter Bryant

A stack overflow bug has been identified in ProFTPd.  This bug allows users to gain remote access (usually root) to an attacker.  This bug requires immediate attention and potentially a restore to the last backup image of your server. Information … Continue reading →

Posted in Security | Tagged , , , , , , | Leave a comment

Exploited VPS? phpmyadmin?

Posted on August 19, 2010 by Liz Quilty

Currently we are being inundated with scans and exploits looking for new machines to take over, most of these are using insecure phpmyadmin installs. If you are unsure if your box has been hacked then the things to look for … Continue reading →

Posted in Security | Tagged , , | Leave a comment

Old versions of PHPMyAdmin and Automated Scanning

Posted on August 9, 2010 by Liz Quilty

It has come to our attention that we have had a decent number of  alerts about machines scanning on our networks in the last day. All of them have been running hacks from /tmp named things like /tmp/dd_ssh etc. These … Continue reading →

Posted in Security | Tagged , , , , | 2 Comments

Has your VPS been hacked?

Posted on September 28, 2009 by Liz Quilty

If you use any pre-packaged software, it always pays to sign up to their mailing list or security advisory list. This means if any exploits or updates happen, you are on the ball and up to date. Today we had … Continue reading →

Posted in Security | Tagged , , , , , , | Leave a comment

Is your WordPress install exploitable?

Posted on August 12, 2009 by Peter Bryant

WordPress is a great application.  e.g. we are using it here for this brand new blog. The irony is that the first post on this blog is a security alert on a WordPress exploit. There is a good summary of … Continue reading →

Posted in Security | Tagged , | Leave a comment